Testing, Linting, and Packaging¶

import pytest

from opsctl.config import deep_merge, load_config


def test_deep_merge_overrides_nested_values():
    base = {"notify": {"slack_channel": None, "email": "ops@example.com"}, "region": "us-east-1"}
    override = {"notify": {"slack_channel": "#alerts"}}

    assert deep_merge(base, override) == {
        "notify": {"slack_channel": "#alerts", "email": "ops@example.com"},
        "region": "us-east-1",
    }


@pytest.mark.parametrize("bad_env", ["production", "", "PROD"])
def test_unknown_environment_is_rejected(tmp_path, bad_env):
    with pytest.raises(ValueError, match="unknown environment"):
        load_config(bad_env, config_dir=tmp_path)


def test_environment_variable_overrides_file(tmp_path, monkeypatch):
    (tmp_path / "base.yaml").write_text("region: eu-west-1\ntimeout_seconds: 10\n")
    monkeypatch.setenv("OPSCTL_REGION", "ap-south-1")

    cfg = load_config("dev", config_dir=tmp_path)

    assert cfg.region == "ap-south-1"

import httpx
import respx

from opsctl import health


@respx.mock
def test_check_reports_success():
    respx.get("https://api.example.com/healthz").mock(return_value=httpx.Response(200))

    result = health.check("https://api.example.com/healthz", timeout=1, backoff=0)

    assert result.ok
    assert result.status_code == 200


@respx.mock
def test_check_retries_503_then_succeeds():
    route = respx.get("https://api.example.com/healthz").mock(
        side_effect=[httpx.Response(503), httpx.Response(503), httpx.Response(200)]
    )

    result = health.check("https://api.example.com/healthz", timeout=1, backoff=0)

    assert result.ok
    assert route.call_count == 3


@respx.mock
def test_check_reports_connection_errors_as_failure():
    respx.get("https://api.example.com/healthz").mock(side_effect=httpx.ConnectError("refused"))

    result = health.check("https://api.example.com/healthz", timeout=1, backoff=0)

    assert not result.ok

from datetime import UTC, datetime, timedelta

import boto3
import pytest
from moto import mock_aws

from opsctl import aws_cleanup


@pytest.fixture
def aws(monkeypatch):
    # Fake credentials so nothing can ever reach a real account
    for key, value in {
        "AWS_ACCESS_KEY_ID": "testing",
        "AWS_SECRET_ACCESS_KEY": "testing",
        "AWS_SESSION_TOKEN": "testing",
        "AWS_DEFAULT_REGION": "us-east-1",
    }.items():
        monkeypatch.setenv(key, value)
    with mock_aws():
        yield boto3.Session(region_name="us-east-1")


def test_finds_only_unprotected_unattached_volumes(aws):
    ec2 = aws.client("ec2")
    unused = ec2.create_volume(AvailabilityZone="us-east-1a", Size=100)["VolumeId"]
    ec2.create_volume(
        AvailabilityZone="us-east-1a",
        Size=50,
        TagSpecifications=[
            {"ResourceType": "volume", "Tags": [{"Key": "opsctl:keep", "Value": "yes"}]}
        ],
    )

    found = aws_cleanup.find_unattached_volumes(aws, "us-east-1", min_age_days=0)

    assert [v.volume_id for v in found] == [unused]


def test_dry_run_does_not_delete(aws):
    ec2 = aws.client("ec2")
    vol_id = ec2.create_volume(AvailabilityZone="us-east-1a", Size=10)["VolumeId"]
    vol = aws_cleanup.Volume("us-east-1", vol_id, 10, datetime.now(UTC) - timedelta(days=60), "")

    aws_cleanup.delete_volume(aws, vol, dry_run=True)

    assert ec2.describe_volumes(VolumeIds=[vol_id])["Volumes"]